edwin/keycloak-password-encryptor

Intercept specific requests

Opened this issue · 1 comments

Using authorization code (keycloak14.0.0), the password is clear text.
image

And i use this spi to encrypted password
image
but i get an error when the browser visit 'http://localhost:8080/auth/realms/td-platform/protocol/openid-connect/auth'
image

is there anyway to encrpt 'http://localhost:8080/auth/realms/td-platform/login-actions/authenticate' only?
thank you

edwin commented

Hi @coolhlm
this example is for a direct grant flow and not for a browser flow
it still doable tho, only need some minor tweaking
including changing the UI template where encryption will happen

hope it helps.